Open dependabot[bot] opened 1 year ago
This is an automated pull request by @dependabot, a service we use to keep libraries up to date in our projects. Read this post to learn how to help us understand if it's ready to be merged (there are lots of considerations to balance!): https://bit.ly/3GphOhV
Bumps sprockets from 3.7.2 to 4.2.0.
Release notes
Sourced from sprockets's releases.
... (truncated)
Changelog
Sourced from sprockets's changelog.
... (truncated)
Commits
eafbd11
Prepare for 4.2.0cce2c0a
Merge pull request #771 from eregon/thread-safe-CachedEnvironment39490de
Make the URI tests pass with ruby-head58eb15d
Add TruffleRuby in CId503c9b
Add ChangeLog entry9d461f1
Make Sprockets::Cache::MemoryStore thread-safe by using a Mutex4e74e3a
Use Concurrent::Map#fetch_or_store2d454bc
Make Sprockets::CachedEnvironment thread-safe by using Concurrent::Map1276b43
Merge pull request #759 from ntkme/module-include-thread-safety722d587
Make Sprockets::Utils.module_include thread safeDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)